🦔 Blumira Briefings Ep. 9: Cisco Vulnerabilities, BadSuccessors, Coding Assistant Prompt Injection

🔔 Welcome back to Blumira Briefings, your essential security download! This week, Matt Warner, Mike Toole, Jake Ouellette, and Zoe Lindsey break down the latest security headlines with context you can actually use. 🔔What We Cover This Week:🩹 Cisco patches 10 issues, including 2 high-severity DoS and privilege escalation flaws 🔑 184 million login credentials for major platforms exposed online🇷🇺 Russia's Fancy Bear stepping up attacks on logistics and IT firms 💻 BadSuccessor: Understanding a Windows Server 2025 vulnerability exploiting permission inheritence 🤖 GitLab Duo prompt injection vulnerability, highlighting potential AI assistant security risksPlus, Expert Insights On:Focusing on threat actor attribution vs. focusing on remediationPractical strategies for balancing AI assistant functionality with securityThe importance of monitoring AD permission changes and account creationThe risk in using Outlook/email storage for sensitive information📰 SOURCES: Cisco Patches: https://www.securityweek.com/cisco-patches-high-severity-dos-privilege-escalation-vulnerabilities/ Exposed Login Credentials: https://www.websiteplanet.com/news/infostealer-breach-report/ Fancy Bear Advisory: https://www.darkreading.com/cyberattacks-data-breaches/cisa-russia-fancy-bear-targeting-logistics-it-firms BadSuccessor Vulnerability: https://www.akamai.com/blog/security-research/abusing-dmsa-for-privilege-escalation-in-active-directory GitLab Duo Prompt Injection: https://www.legitsecurity.com/blog/remote-prompt-injection-in-gitlab-duo